Description
Maui is ransomware associated with North Korean threat actors that targeted healthcare organizations and other sectors. Its operators delayed attacks to maximize impact, encrypted Windows and Linux systems, and demanded payment through negotiators, and United States government agencies issued advisories about its use against hospitals. The family's targeting of medical providers, where downtime endangers patients, illustrates the human cost of state linked ransomware operations.
Stats
- First seen
- November 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Ransom.Maui.2 |
| Win32.Ransomware.Maui |